PT-2007-6320 · Sun+1 · Java Web Start+1

Publicado 2007-10-06 · Atualizado 2017-09-29 · CVE-2007-5237

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Java Web Start in Sun JDK and JRE versions 6 Update 2 and earlier

Description: The issue allows user-assisted remote attackers to read and modify local files via an untrusted application. This is due to the failure of Java Web Start to properly enforce access restrictions for untrusted applications.

Recommendations: For Java Web Start in Sun JDK and JRE versions 6 Update 2 and earlier, update to a version later than 6 Update 2 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5237

HPSBUX02284

Produtos afetados

Hp-Ux

Java Web Start

Referências · 33

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTIzNDUzMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5237 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5899 · Nota
• http://securitytracker.com/id?1018770 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1856/references · Nota
• http://dev2dev.bea.com/pub/advisory/272 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5236 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3895 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 · Aviso do Fabricante
• http://secunia.com/advisories/27693 · Nota
• http://secunia.com/advisories/30780 · Nota